GMS-2020-274: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

July 29, 2020 (updated September 23, 2021)

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) in git-tags-remote.

References

github.com/advisories/GHSA-gm9x-q798-hmr4
github.com/sh0ji/git-tags-remote/commit/a20488960cbd2c98455386108253094897ebfc1c
github.com/sh0ji/git-tags-remote/issues/58
www.npmjs.com/advisories/1517

Detect and mitigate GMS-2020-274 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →